Most cloud platforms that need access to your infrastructure start with the same onboarding step: paste in a service account key. Or an access key and secret. Or a JSON blob you downloaded from the console and definitely should not be emailing to yourself.

You paste it in. The platform stores it. You hope they encrypted it. You hope they rotate...